Security-minded individuals can already enable two-step verification on their Google account for added protection, but now the Web giant is taking things even further.
Enter Security Key, a physical USB second factor authentication method that only works after verifying the login site is truly a Google website, not some malware-rigged site pretending to be Google. Instead of typing in a code, you just insert the Security Key into your computer and tap it when prompted in Chrome.
"When you sign into your Google Account using Chrome and Security Key, you can be sure that the cryptographic signature cannot be phished," Google Security product Manager Nishit Shah wrote in a blog post Tuesday.
With traditional two-step verification, Google will send a unique code to your phone every time you try to log in from an unfamiliar device, and you'll have to provide that code in addition to your regular password.
"Hackers usually work from afar, so this second factor makes it much harder for a hacker who has your password to access your account, since they don't have your phone," Shah wrote.
The new Security Key incorporates the open Universal 2nd Factor (U2F) protocol from the Fast Identity Online (FIDO) Alliance, which is aimed at developing alternative methods to verify users' identify when logging into websites and other services. This means other websites with account login systems can get the system working in Chrome as well.
"As more sites and browsers come onboard, security-sensitive users can carry a single Security Key that works everywhere FIDO U2F is supported," Shah wrote.
The feature is free to use, but you'll need to buy a compatible USB device from a U2F participating vendor. If you're interested in this additional layer of protection, head over to Google's support site to learn more.
For more, see Two-Factor Authentication: Who Has It and How to Set It Up.